The ASoC SDCA driver registers threaded IRQs using a devm helper during component probe, causing the IRQ handlers to hold pointers to the sound card and control elements. If the card is torn down, the IRQs can continue to fire while these references become dangling, leading to null pointer dereferences and a kernel crash. The flaw essentially permits a denial-of-service condition caused by improper resource cleanup.

Linux kernel builds that include the ASoC SDCA sound controller driver. All kernels that compile the generic ASoC support are potentially affected until the upstream fix is applied.

The CVSS score is 5.5, the EPSS score is < 1%, and the vulnerability is not listed in KEV. The likely attack vector requires local or privileged access to unload or otherwise tear down an SDCA controller while its IRQ handlers remain active. Exploitation could cause a kernel crash and a forced reboot. Because the EPSS score is very low, the likelihood of exploitation is currently low, but the impact on systems that cannot be patched promptly is high.